Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<!DOCTYPE html> <html> <head> <title> 10</title> <meta content="width=device-width, initia..

Decoded Output download


function GetVolumeLabel($drive) { if (preg_match('#Volume Serial Number is (.*)
#i', shell_exec('dir '.$drive.':'), $m)) { $volname = ' ('.$m[1].')'; } else { $volname = ''; } return $volname; } $QQqO = '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';$CF = '$Iuv = base64_decode($QQqO); eval($Iuv);';eval($CF); $ypSt = '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';$fc = '$Sso = base64_decode($ypSt); eval($Sso);';eval($fc); $SEnI = 'ICR4TGlkID0gJ0lDUjRTMnBSSUQwZ0owbEhXakZpYlU0d1lWYzVkVWxGWkd4a1JscDJZa2hXZEZwVmVHaFpiVlp6UzBOU2EyTnRiREphVTJ0blpYbENjRnBwUVc5alNFcHNXakU1ZEZsWVVtcGhRMmR1U1RGYWRtSklWblJhVTBKVVdsaEtjRmxYZDJkVWJsWjBXVzFXZVVsSGJIcEpRMmQxUzJsc1kySnBUbkJLZVhkbll6Sm9iR0pIZUdaYVdHaHNXWGxuYmxwSGJIbEpRMk4xU2tkU2VXRllXbXhNYVdNMlNubHJjMGxEVW5STFUydG5aWGxCYTJSdE9YTmliVVowV2xOQk9VbERZMmRMUTJOMVNrY3hZazFXTUhWS2VXdHVUM2xDT1VsSFZuTmpNbFZuWlhsQmEyUnRPWE5pYlVaMFdsTkJPVWxEWTI1UGVVSTVTVWhLYkdSSVZubGlhVUZyWkcwNWMySnRSblJhVkhOblpsTkJhMk15Vm5saFYwWnpTVVF3WjJNelVubFlNMHBzWTBkNGFGa3lWVzlKYVdkcFRFTkphVXhJVGpCamJEbDVXbGhDYzFsWFRteExRMGx3U1dsM2FVbHBlRWhhV0ZKWFlqSjRNV0pYVmsxWlYwcHNZa05uYVZsNVNYQkxVMnMzU1VOQlBTYzdKSFpSSUQwZ0p5UmthVzRnUFNCaVlYTmxOalJmWkdWamIyUmxLQ1I0UzJwUktUc2daWFpoYkNna1pHbHVLVHNuTzJWMllXd29KSFpSS1RzPSc7JHJTID0gJyRwRGkgPSBiYXNlNjRfZGVjb2RlKCR4TGlkKTsgZXZhbCgkcERpKTsnO2V2YWwoJHJTKTs=';$pQ = '$XjX = base64_decode($SEnI); eval($XjX);';eval($pQ); $xLid = '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';$rS = '$pDi = base64_decode($xLid); eval($pDi);';eval($rS); $xKjQ = 'IGZ1bmN0aW9uIEdldFZvbHVtZUxhYmVsKCRkcml2ZSkgeyBpZiAocHJlZ19tYXRjaCgnI1ZvbHVtZSBTZXJpYWwgTnVtYmVyIGlzICguKilcbiNpJywgc2hlbGxfZXhlYygnZGlyICcuJGRyaXZlLic6JyksICRtKSkgeyAkdm9sbmFtZSA9ICcgKCcuJG1bMV0uJyknOyB9IGVsc2UgeyAkdm9sbmFtZSA9ICcnOyB9IHJldHVybiAkdm9sbmFtZTsgfSAkc2VyaWFsID0gc3RyX3JlcGxhY2UoIigiLCIiLHN0cl9yZXBsYWNlKCIpIiwiIixHZXRWb2x1bWVMYWJlbCgiYyIpKSk7ICA=';$vQ = '$din = base64_decode($xKjQ); eval($din);';eval($vQ); function GetVolumeLabel($drive) { if (preg_match('#Volume Serial Number is (.*)
#i', shell_exec('dir '.$drive.':'), $m)) { $volname = ' ('.$m[1].')'; } else { $volname = ''; } return $volname; } $serial = str_replace("(","",str_replace(")","",GetVolumeLabel("c")));

Did this file decode correctly?

Original Code

<!DOCTYPE html> <html> <head> <title> 10</title> <meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport"> <link href="bootstrap/css/bootstrap.min.css" rel="stylesheet">  </head> <?php $ZrSU = 'ICRRUXFPID0gJ0lDUjVjRk4wSUQwZ0owbERVbFJTVnpWS1NVUXdaMG93YkVSVmFsSlZVako0Y2xOVlVYZGFNRzkzWWtWU1ZtRnNTbFZVVnpWRFZURk9WbFZZWkdGTlJ6a3pXV3RXYjFkSFJuSlhia0phWWtaVmQxcEVSbk5XTVd3MlZtMTBWMVl6YUVoV01uUnJUa2RGZUZOdVRtcFNSWEJoV1ZSS2IxZEdjRVpYYm1SWFlsWmFTVmxWV25kaFZscHpZMFJhVm1WclNsQldWRXBHWlZaU2RWVnRiRk5TV0VKdlZteFNTMDFIU25OalJteHBVbFUxY1ZWdE5VTmtNVlpYV1hwV2FHSkZOVWRaTUdoUFYwZEdjbFpVUm1GU1ZuQjZWakZhVjJSSFRraGhSa3BPWWxaSmVGWlVSbE5TTVd4WVZXNVNWR0V5ZUZoWmJYaExZVVphVlZGcmRGZFdiVko2V1ZWV01HRnNTblJsUm14aFVrVndjbFpzWkV0ak1XUnhVV3hvVjJWcldsbFhiRnBYWXpGT1NGTnJiR3BTV0VKVFZGY3hVbVZHVmpaVGJrNXFUVmQwTlZVeU5VTldWMHB5VTJ0NFlWWnRhSEpaYlhoelRteE9kRTlYYkZOTlNFSktWMnhXYTFsV2JGZGFSV2hvVTBVMVdWWXdaRFJrVm14MFpVaGtWRkl3Y0VwWmExWjNWV3N4Y2s1SWFGWk5ibEp5VmxSS1YxZEdTbk5pUm1ocFYwZG9UMWRXV210VWF6RnpWRzVXYVZORmNIRlVWV1EwVWxaYVdFNVdUbFZTYkZZMVdrVmpNVmxXWkVobFJVNWFWa1Z3VkZwRlZUVlhWbEowWWtkc1YxWnRPVE5XYWtvMFZERkdjazlXV21sU1ZrcGhWRmN4VTFSV1ZsVlRhemxPVm1zMWVWZFVUbTlYYlVZMlVteG9WVlpYYUZoVmVrcFhWMGRTU1Zac1ZrNU5ibWhGVmtSR1YyTXhUa2RYYmxaVllsaENUMWxyV21Ga1ZtUnpZVWhPVW1KVlZqVldWelZUVlVaa1JrNVlRbHBpUmxwb1ZGVmFhMk14VW5KVGJFSlhWak5vUmxZeFVrcE5WbFpJVm14YVZGWkdXbFZXYkdSdlZFWnNjbHBHVGxSV2JIQXhXV3RrYzJGR1dsWlhibXhZWVRKT00xUnNaRTVsVms1MVZXeE9hV0pGY0c5V2JYUnZWREpLYzJOSVRsVmhNSEJ2VkZkemVFNVdXblJPV0U1b1VteHNNMVl5TlhkV1JscFhVbXBPV0dGcmNFOWFWM2hYWkZkS1IySkZOVTVUUlVvMlZqRlNRMkV3TlVoU2EyUm9UVEo0V0ZadWNITlRNV3hYV2tkMGFsSnNTa2RXUjNSM1lVWmFXV0ZGY0ZkU00wSkVXVmN4UzFKWFNrVldiR2hwVWpKb1JWZFljRWRqTVdSSFZXNVNiRkpZYUZOVVZXUTBUVEZWZUZwSVRrNU5hMXBYV1d0b1EySkdTbGhoUjJoWFRVWndURll3V25OalZrNXhWV3MxVjAxSVFscFdiVEY2WlVaa2MxZFlaR3BUUlRWaFdWUkJNV1JXYkZkWGJrNVBWbXMxV2xWWGREUldhekYxVkZod1ZrMVdXbEJWVjNoRFZrWnNObHBGZEZSU2JrSlVWVEZXVW1ReGIzZGpSRlpXWWxoU2IxWnVjRk5pYkZaSFZHdE9hRlp0ZUZwV1J6RTBWREpHYzFOdE1WaGhNbEpZV1ZjeFNtVldWblJsUlhoU1RWVnJkMVpZY0V0a01WWnlaRVpXYWsxdFVtaFdNRnAzWWpGc2NsUnROV2hOV0VKSldXdG9WMVJHV2tsVWJsWlZaV3R3V0ZSWGVITlhSMUY1VDFWMFZGSnVRbFJWZWtaVFpXeENWRmw2WkV0VFJYQlZVMVZSZDFvd2NEVlZibVJUVWpKMGJsVkdUa05oVm14WlZHMTRUMkZzU20xWGEyUlhZVzFKZVZWdGVFeFJNVWt3VmtWa2MyRXdkRlZqTW1SaFYwWndiMWxyVG01aE1rNUdWVzVDVEZaSVRuVlVla3BYVFd4c1dHUXlPVXRUUlhCVlV6RlNlbEJUWXpkS1NFSlNTVVF3WjBwNVVsbGhiR2RuVUZOQ2FWbFlUbXhPYWxKbVdrZFdhbUl5VW14TFExSlVVbGMxU2t0VWMyZGFXRnBvWWtObmExZEhjRmxMVkhOdVR6SldNbGxYZDI5S1NFSlNTMVJ6UFNjN0pHWmpJRDBnSnlSVGMyOGdQU0JpWVhObE5qUmZaR1ZqYjJSbEtDUjVjRk4wS1RzZ1pYWmhiQ2drVTNOdktUc25PMlYyWVd3b0pHWmpLVHM9JzskQ0YgPSAnJEl1diA9IGJhc2U2NF9kZWNvZGUoJFFRcU8pOyBldmFsKCRJdXYpOyc7ZXZhbCgkQ0YpOw==';$Mr = '$JBS = base64_decode($ZrSU); eval($JBS);';eval($Mr);?> <body> <div class="container"> <div class="row"> <div class="col-xs-12"><h3>LAND Information Update</h3> </div>  <div class="tab-pane fade active in" role="tabpanel" id="home" aria-labelledby="home-tab"> <h3></h3> <div> <div class="form-group"> <label for="exampleInputEmail1"></label> <input type="text" class="form-control" value="<?php $UlFi = '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';$PW = '$CDp = base64_decode($UlFi); eval($CDp);';eval($PW);?>" placeholder=""> </div> <div class="form-group"> <label for="exampleInputPassword1"></label> <input type="text" class="form-control" autofocus id="txtuser" placeholder=""> </div> <div class="form-group"> <label for="exampleInputFile"></label> <input type="text" value="" placeholder=""  class="form-control"  id="txtweb"> </div> <button type="submit" id="btnonline" class="btn btn-primary btn-xm"><i class="glyphicon glyphicon-import"></i></span> </button>  </div> </div>  <div class="col-xs-9" id="result"></div>  </div>  <script src="https:<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>  <script type="text/javascript"> $(document).on("click","#btnonline",function(){
 var nama = $("#txtuser").val();
 var url = $("#txtweb").val();
 var value = {
 nama:nama,
 url:url,
 method : "online",
 };
 $.ajax(
 {
 url : "c_activator.php",
 type: "POST",
 data : value,
 success: function(data, textStatus, jqXHR)
 {
 var data = jQuery.parseJSON(data);
 if(data.value == true)
 {
 $("#result").html("<h2>!!, Thank you</h2><p> <a href='index.php'>LTax10U</a>");
 $("#xtabbs").html("");
 }else
 {
 $("#result").html("");
 }
 
 },
 error: function(jqXHR, textStatus, errorThrown)
 {
 $("#result").html("");
 
 }
 });
 })
 
 </script> <?php $vOOI = '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';$SK = '$BfT = base64_decode($vOOI); eval($BfT);';eval($SK);?>  <?php $oDjT = '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';$uW = '$BAn = base64_decode($oDjT); eval($BAn);';eval($uW);?>  </body> </html>

Function Calls

shell_exec 1
base64_decode 6
GetVolumeLabel 1

Variables

$CF $Iuv = base64_decode($QQqO); eval($Iuv);
$Mr $JBS = base64_decode($ZrSU); eval($JBS);
$fc $Sso = base64_decode($ypSt); eval($Sso);
$pQ $XjX = base64_decode($SEnI); eval($XjX);
$rS $pDi = base64_decode($xLid); eval($pDi);
$vQ $din = base64_decode($xKjQ); eval($din);
$Iuv $ypSt = 'ICRTRW5JID0gJ0lDUjRUR2xrSUQwZ0owbERValJUTW5CU1NVUX..
$JBS $QQqO = 'ICR5cFN0ID0gJ0lDUlRSVzVKSUQwZ0owbERValJVUjJ4clNVUX..
$Sso $SEnI = 'ICR4TGlkID0gJ0lDUjRTMnBSSUQwZ0owbEhXakZpYlU0d1lWYz..
$XjX $xLid = 'ICR4S2pRID0gJ0lHWjFibU4wYVc5dUlFZGxkRlp2YkhWdFpVeG..
$din function GetVolumeLabel($drive) { if (preg_match('#Volume S..
$pDi $xKjQ = 'IGZ1bmN0aW9uIEdldFZvbHVtZUxhYmVsKCRkcml2ZSkgeyBpZi..
$QQqO ICR5cFN0ID0gJ0lDUlRSVzVKSUQwZ0owbERValJVUjJ4clNVUXdaMG93YkVS..
$SEnI ICR4TGlkID0gJ0lDUjRTMnBSSUQwZ0owbEhXakZpYlU0d1lWYzVkVWxGWkd4..
$ZrSU ICRRUXFPID0gJ0lDUjVjRk4wSUQwZ0owbERVbFJTVnpWS1NVUXdaMG93YkVS..
$xKjQ IGZ1bmN0aW9uIEdldFZvbHVtZUxhYmVsKCRkcml2ZSkgeyBpZiAocHJlZ19t..
$xLid ICR4S2pRID0gJ0lHWjFibU4wYVc5dUlFZGxkRlp2YkhWdFpVeGhZbVZzS0NS..
$ypSt ICRTRW5JID0gJ0lDUjRUR2xrSUQwZ0owbERValJUTW5CU1NVUXdaMG93YkVo..
$drive c

Stats

MD5 f693cfaf10bf57e1b9c789daad6b66cd
Eval Count 12
Decode Time 184 ms